Lucene search
Veracode Vulnerability DatabaseVERACODE:27994HistoryNov 27, 2020 - 12:46 a.m.
XML External Entity (XXE)
2020-11-2700:46:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
0.007 Low
EPSS
Percentile
80.2%
petl is vulnerable to XML External Entities (XXE). The vulnerability exists as external entities were not disabled by default by the default lxml parser.
References
github.com/nvn1729/advisories/blob/master/cve-2020-29128.md
github.com/petl-developers/petl/commit/07420ef8463cc387aea84e2d6241cf556574e2a5
github.com/petl-developers/petl/compare/v1.6.7...v1.6.8
github.com/petl-developers/petl/issues/526
github.com/petl-developers/petl/pull/527
github.com/petl-developers/petl/pull/527/commits/1b0a09f08c3cdfe2e69647bd02f97c1367a5b5f8
github.com/petl-developers/petl/security/advisories/GHSA-f5gc-p5m3-v347
petl.readthedocs.io/en/stable/changes.html
Related
prion
prion
Design/Logic Flaw
2020-11-26 05:15:00
cve
cve
CVE-2020-29128
2020-11-26 05:15:10
osv
osv
CVE-2020-29128
2020-11-26 05:15:10
PYSEC-2020-75
2020-11-26 05:15:00
XML Injection in petl
2021-04-20 16:32:08
github
github
XXE in petl
2020-12-02 18:28:30
XML Injection in petl
2021-04-20 16:32:08
nvd
nvd
CVE-2020-29128
2020-11-26 05:15:10
cvelist
cvelist
CVE-2020-29128
2020-11-26 05:01:00